Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/AS48700.asa
File:                     AS48700.asa (raw, json)
Hash identifier:          C6poKzLysJKn2xBPGTwFxBEZkUwyOo+wJDJRV11LSl4=
Subject key identifier:   B5:66:BF:70:59:80:6A:CA:B4:9F:70:88:7E:40:9A:65:8A:0E:BB:82
Certificate issuer:       /CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca
Certificate serial:       16488F45A141330E3499279D2038AE820BBB8B26
Authority key identifier: 60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/AS48700.asa
Signing time:             Tue 10 Mar 2026 19:44:45 +0000
ASPA not before:          Tue 10 Mar 2026 19:39:45 +0000
ASPA not after:           Tue 09 Mar 2027 19:44:45 +0000
Customer ASID:            48700
Providers:                AS: 16509
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:48:8f:45:a1:41:33:0e:34:99:27:9d:20:38:ae:82:0b:bb:8b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca
        Validity
            Not Before: Mar 10 19:39:45 2026 GMT
            Not After : Mar  9 19:44:45 2027 GMT
        Subject: CN=B566BF7059806ACAB49F70887E409A658A0EBB82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:22:41:e0:32:40:3d:28:ee:87:e6:f2:d2:fb:
                    af:c5:d9:69:ef:5a:0d:82:86:cb:9e:c1:f6:24:f3:
                    15:ff:75:74:aa:9d:b3:3d:17:54:df:7f:1d:1e:31:
                    a9:11:18:c5:d7:82:0e:f1:c7:d9:a5:4b:89:87:cb:
                    db:9d:49:8c:26:7e:ef:75:6e:d1:54:ad:46:35:6c:
                    ad:5f:dd:41:19:c8:4b:38:88:b3:48:ae:58:e7:39:
                    e4:4c:9e:12:3c:96:b8:6b:f8:6a:70:ed:01:d2:0f:
                    4c:af:da:de:8b:2a:fc:26:d8:73:7d:8c:80:e3:57:
                    5d:a5:57:04:0b:86:b5:ce:f4:95:42:a1:ed:de:a6:
                    bf:80:6d:44:2c:ee:ae:16:4f:c1:7c:63:76:2c:60:
                    a1:10:8b:d9:8b:ac:f2:68:1b:7e:18:62:d0:c6:fb:
                    a4:d6:5d:67:09:d6:8e:37:47:59:03:f1:b2:02:32:
                    89:27:77:8d:0d:a1:80:61:8e:14:e4:c3:60:10:4d:
                    11:11:06:b0:91:6e:e0:2d:74:70:2d:06:c3:22:e8:
                    c9:3d:76:44:95:d8:22:05:e8:70:be:99:03:47:c1:
                    d7:0a:a6:3b:83:bd:84:53:64:2f:69:c4:a4:f7:38:
                    32:b7:5d:14:0d:d5:18:83:40:dd:98:12:5c:65:d5:
                    6b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:66:BF:70:59:80:6A:CA:B4:9F:70:88:7E:40:9A:65:8A:0E:BB:82
            X509v3 Authority Key Identifier:
                keyid:60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/AS48700.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48700

    Signature Algorithm: sha256WithRSAEncryption
         03:bd:33:13:de:00:60:d1:07:20:46:9c:4e:cd:34:ac:f8:67:
         03:7d:5f:26:9f:dd:65:33:c2:40:fe:b6:ed:64:b4:12:b0:b7:
         a5:f0:6a:46:f7:b5:82:f1:aa:b1:76:2f:09:b2:9f:8b:a7:2d:
         17:ee:81:cd:c0:bb:8a:38:d3:5b:4a:62:99:8b:ff:9b:6a:85:
         24:9e:fe:50:a0:41:73:ab:dd:1b:23:50:1f:8b:ce:ec:ad:34:
         ca:c5:58:6e:9d:ae:62:b3:c5:3c:c3:b6:c9:7a:09:30:12:a1:
         2f:e7:a1:1e:cc:a6:2a:0b:ee:2a:91:ad:26:d0:c2:98:80:a4:
         92:7a:09:2d:af:e6:20:35:16:03:6a:bb:b0:ba:bb:b7:25:7d:
         02:3e:ca:ea:b2:6e:20:c4:da:40:0e:9c:14:9c:ca:4a:74:18:
         00:30:ee:1b:b9:99:cd:e0:5c:62:81:d8:e6:d1:25:9d:7b:d8:
         57:c9:54:23:90:ec:d2:ae:94:70:c0:b7:9f:7e:bd:a1:ff:80:
         81:a2:6c:53:29:3e:cb:93:9f:e0:5f:d2:d8:a6:fb:99:6c:f2:
         a2:d7:8e:b8:a9:7f:f6:58:b7:ba:ed:8d:b2:51:6d:7c:3c:72:
         4d:26:5f:65:a6:8e:42:2c:0f:86:1e:2b:d2:16:4a:b2:82:8b:
         ed:49:9f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:53:10 2026 by rpki-client